Cybersecurity certification granted to Suprema by RED committee
In a significant move towards securing wireless access control systems, South Korean tech company Suprema Inc. has become the first in the industry to achieve CE RED certification under the enhanced cybersecurity requirements of the European Union's updated Radio Equipment Directive (RED).
The updated RED directive, effective from August 1, 2025, imposes specific cybersecurity requirements on IoT devices using wireless technologies like Wi-Fi and Bluetooth. The directive, outlined in Articles 3.3(d), 3.3(e), and 3.3(f) of the RED Delegated Act, mandates that devices must be engineered to prevent unauthorized access, protect personal data and privacy, and safeguard against fraud or misuse.
Suprema's AI-based facial authentication access control devices, the BioStation 3 and BioEntry W3, have been certified to comply with these requirements. These devices, designed for use in the European Union, run deep-learning-based facial authentication algorithms locally on the device and support various authentication methods, including Bluetooth, NFC-based mobile credentials, RFID cards, providing flexible authentication options.
The CE RED certification process for Suprema devices includes requirements for network protection, personal data and privacy safeguards, and fraud prevention. The revised certification process is expected to be completed by Suprema for all its devices supporting various access authentication methods by August.
Suprema's CEO, Hanchul Kim, stated that the CE RED certification confirms that their products meet internationally recognized standards for security, safety, and wireless performance. "This certification demonstrates Suprema's commitment to staying ahead of evolving regulatory requirements," Kim said.
The updated RED directive applies to a wide range of connected devices, including smart home IoT devices, wearables, connected toys, and other appliances using wireless technologies like Wi-Fi and Bluetooth. Compliance is mandatory for new or substantially modified products marketed in the EU from August 1, 2025, as the CE marking for radio equipment will require evidence of cybersecurity compliance under RED.
Manufacturers, importers, and distributors must integrate cybersecurity considerations during the product design lifecycle and proactively assess their products to meet these directives, as the directive represents a market access requirement, not just a legal formality.
In sum, the updated EU RED cybersecurity requirements aim to ensure robust network security to prevent unauthorized network access, strong data privacy protections, and safeguards to avoid fraudulent or abusive network use in IoT devices using Wi-Fi and Bluetooth. Suprema's achievement in meeting these requirements sets a high standard for the access control industry.
Technology companies, like Suprema Inc., are integrating enhanced cybersecurity measures to adhere to the updated Radio Equipment Directive (RED) of the European Union, specifically in IoT devices using wireless technologies such as Wi-Fi and Bluetooth. This includes Suprema's AI-based facial authentication access control devices, BioStation 3 and BioEntry W3, which have been certified to comply with these stringent cybersecurity requirements.
